Package oracle.iam.grc.sod.vo
Class Duty
java.lang.Object
oracle.iam.grc.sod.vo.Duty
- All Implemented Interfaces:
Serializable
This interface is a representation of a duty record in SoD Engine Implementation.
An instance of its implementation would need to be created by the IdM system PEP,
and will get utilized to form the input of SoD analysis.
Any Duty in the SoD Engine will be of a DutyType and would exist within the domain
of an instance of a source datatstore and therefore the value object has a place
to hold the relevant details.
Most of the SoD engines allow a provision of coalescing Duties assignment into sets,
during policy authoring. Policy violation events could then not only be linked to
toxic combination of duties but also combinations of sets of duties.
E.g. In OAACG, there is a concept of 'entitlements' which is a collection of 'access points'
(term used in OAACG, for representing 'duties') and could be used to form the logic of a SoD policy.
Using the principles of the GoF 'composite' design pattern,
this interface also has a placeholder for capturing a collection of linked duties
in the SoD engine. However, any information associated to a set of duties will
most likely not be expected within the instance of implementation of this interface,
while the input is being sent for SoD analysis. It will be only the 'duty list'
present in the 'Violation' objects contained within the 'SoDAnalysisResult',
which could have instances of 'Duty' implementation which are actually sets and
not individual objects. Why? Because it is only the SoD engine that has provided
the capability to model the combinations of duties while policy authoring and once
these policies will get violated during SoD analysis, the result ('SoDAnalysisResult')
which the SoD Analysis service component needs to collect from the SoD engine would have
references to the sets of duty objects.
- See Also:
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionDuty[]
long
boolean
isSet()
void
setAttributes
(Attribute[] attributes) void
setConnectingOperator
(String connectingOperator) void
setDutyObjects
(Duty[] dutyObjects) void
setDutyType
(DutyType dutyType) void
setSet
(boolean set) void
setSourceDatastoreContextRegID
(long sourceDatastoreContextregID)
-
Constructor Details
-
Duty
public Duty()
-
-
Method Details
-
getAttributes
- Returns:
- Returns the attributes.
-
setAttributes
- Parameters:
attributes
- The attributes to set.
-
getConnectingOperator
- Returns:
- Returns the connectingOperator.
-
setConnectingOperator
- Parameters:
connectingOperator
- The connectingOperator to set.
-
getDutyObjects
- Returns:
- Returns the dutyObjects.
-
setDutyObjects
- Parameters:
dutyObjects
- The dutyObjects to set.
-
getDutyType
- Returns:
- Returns the dutyType.
-
setDutyType
- Parameters:
dutyType
- The dutyType to set.
-
isSet
public boolean isSet()- Returns:
- Returns the set.
-
setSet
public void setSet(boolean set) - Parameters:
set
- The set to set.
-
getSourceDatastoreContextRegID
public long getSourceDatastoreContextRegID()- Returns:
- Returns the sourceDatastoreContext.
-
setSourceDatastoreContextRegID
public void setSourceDatastoreContextRegID(long sourceDatastoreContextregID) - Parameters:
sourceDatastoreContext
- The sourceDatastoreContext to set.
-